Technical Information
- http://st###gvpn.ga/download/usbdata
- %TEMP%\c235.tmp\c246.tmp\c257.bat
- 'st###gvpn.ga':80
- http://st###gvpn.ga/download/usbdata
- DNS ASK st###gvpn.ga
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\C235.tmp\C246.tmp\C257.bat <Full path to file>"' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\C235.tmp\C246.tmp\C257.bat <Full path to file>"
- '<SYSTEM32>\timeout.exe' /T 10 /NOBREAK